Sorry I didn’t see that when it was open.
I have seen a very similar problem and was able to resolve it, but it really had me baffled until I figured out what they had done. As IE hijacking REALLY is a sore spot w/ me I felt it worth while to postthis so that it might help others who encounter similar problems.
Not only did this hijacker change the start up page, it also put a 1-900 dialer on the desktop. This happened to a family member who had young children.
I when through and cleaned everything up, as most of the respondants said in thier posts. Everthing should have been fine but when I rebooted everything went back to the way it was. I was on the verge of reformatting when I figured it out. The key was the disabled Norton AntiVirus. I realized that something had to be running when the computer started that was changing the registry. I checked all of the various RUN keys in the regestry and the StartUp group. I made backups of all of the keys and removed all but the essentials. The problem returned. I noticed that NAV still wasn’t running. I then removed everything from the RUN Keys and startup. And the problem was gone. By now I was suspecting that NAV had actually been HiJacked. When I Ran the NAV command that was in the RUN key, the dialer returned to the desktop and the start page of the IE was changed. The offending program had named itself t look like NAV and had renamed NAV.
I hope this can help some others
